CVE-2025-2018

CVE-2025-2018 is a remote code execution vulnerability affecting Ashlar-Vellum Cobalt, stemming from a type confusion flaw during VS file parsing. This vulnerability has a CVSS score of 7.8 (High), indicating that an attacker could execute arbitrary code on a vulnerable system if a user opens a malicious file or visits a malicious page. While user interaction is required, successful exploitation grants an attacker full control over the affected process. Currently, there is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.